Количество 6
Количество 6

CVE-2015-5964
The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service (session store consumption) via unspecified vectors.

CVE-2015-5964
The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service (session store consumption) via unspecified vectors.

CVE-2015-5964
The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service (session store consumption) via unspecified vectors.
CVE-2015-5964
The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache ...
GHSA-x38m-486c-2wr9
Denial-of-service possibility in logout() view by filling session store

BDU:2015-11321
Уязвимость фреймворка для веб-приложений Django, позволяющая нарушителю вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | CVE-2015-5964 The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service (session store consumption) via unspecified vectors. | CVSS2: 5 | 2% Низкий | почти 10 лет назад |
![]() | CVE-2015-5964 The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service (session store consumption) via unspecified vectors. | CVSS2: 5 | 2% Низкий | почти 10 лет назад |
![]() | CVE-2015-5964 The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty sessions in certain circumstances, which allows remote attackers to cause a denial of service (session store consumption) via unspecified vectors. | CVSS2: 5 | 2% Низкий | почти 10 лет назад |
CVE-2015-5964 The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache ... | CVSS2: 5 | 2% Низкий | почти 10 лет назад | |
GHSA-x38m-486c-2wr9 Denial-of-service possibility in logout() view by filling session store | CVSS3: 7.5 | 2% Низкий | около 3 лет назад | |
![]() | BDU:2015-11321 Уязвимость фреймворка для веб-приложений Django, позволяющая нарушителю вызвать отказ в обслуживании | CVSS2: 5 | 2% Низкий | почти 10 лет назад |
Уязвимостей на страницу